Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/S5poUcmm58bh9LYHwgnRXNYgnoA.roa
File: S5poUcmm58bh9LYHwgnRXNYgnoA.roa (raw, json)
Hash identifier: lYdAfaTYBlu17YVjsaWJtgDfvkSUWB0Kx0isvQs/8cw=
Subject key identifier: 4B:9A:68:51:C9:A6:E7:C6:E1:F4:B6:07:C2:09:D1:5C:D6:20:9E:80
Certificate issuer: /CN=8ad9281aafefc8375ad8b4b7e604899555952237
Certificate serial: 019425218B95677CCD34C7D6073E1BDF1F88
Authority key identifier: 8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/S5poUcmm58bh9LYHwgnRXNYgnoA.roa
Signing time: Thu 02 Jan 2025 03:49:02 +0000
ROA not before: Thu 02 Jan 2025 03:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57804
IP address blocks: 185.160.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8b:95:67:7c:cd:34:c7:d6:07:3e:1b:df:1f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ad9281aafefc8375ad8b4b7e604899555952237
Validity
Not Before: Jan 2 03:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b9a6851c9a6e7c6e1f4b607c209d15cd6209e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:7b:87:02:66:89:4b:b8:ca:c9:e6:5b:64:
db:04:f1:20:ed:4f:3e:cd:89:3d:bc:c3:ae:f6:12:
85:8a:c3:97:69:57:73:8c:46:7f:60:f3:90:34:6e:
2e:70:a5:7f:6a:c9:7d:8f:a6:ff:c3:b0:e9:bc:80:
b0:b0:d6:0c:fc:6d:f9:4f:7f:f3:ea:62:f5:f3:e0:
56:4a:20:b5:30:fa:b0:31:fc:7c:ee:01:4b:6e:ee:
bf:52:d5:64:f3:da:12:93:a6:bb:86:6e:38:8f:2b:
fd:ca:1a:e3:f3:59:95:63:d8:26:e0:3b:fc:2e:a5:
68:8b:17:64:b2:02:b2:df:9e:bd:27:0e:ab:02:b4:
64:c4:b8:ac:97:97:bb:e0:92:4c:cf:d6:ca:18:4a:
2a:b7:99:7a:fb:00:64:d9:6a:9c:32:13:29:8e:49:
35:a1:47:ac:74:ed:4b:6b:7b:8d:ee:c3:c4:2a:d6:
66:78:b4:87:14:76:1a:11:ef:b6:1d:e0:0f:b9:c4:
83:da:34:a0:26:c6:22:3e:7f:36:76:65:2e:d5:3e:
8b:d0:95:81:11:26:50:b7:6c:bd:be:9e:c8:24:72:
9e:80:03:a6:0b:da:31:53:73:7f:70:08:ec:9f:0d:
c9:44:74:53:ed:c1:fc:99:9b:b8:ae:44:95:b9:6a:
34:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:68:51:C9:A6:E7:C6:E1:F4:B6:07:C2:09:D1:5C:D6:20:9E:80
X509v3 Authority Key Identifier:
keyid:8A:D9:28:1A:AF:EF:C8:37:5A:D8:B4:B7:E6:04:89:95:55:95:22:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itkoGq_vyDda2LS35gSJlVWVIjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/S5poUcmm58bh9LYHwgnRXNYgnoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/058509-2fe7-486b-b4ad-8c74f9dd67fc/1/itkoGq_vyDda2LS35gSJlVWVIjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.91.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:3d:8b:97:a0:ac:b8:ed:8b:b7:d8:b6:95:c7:22:6a:b0:74:
6f:f8:3b:1e:da:0a:d1:01:9e:4c:02:f0:53:5a:32:16:01:95:
fd:85:94:0e:f4:6e:86:dd:1a:66:a4:c2:14:43:b1:18:75:a9:
ef:20:b7:31:05:84:3d:be:15:be:24:53:51:63:a7:82:2e:cc:
2d:42:32:12:4b:5e:38:19:42:cc:48:0e:c8:95:3c:f5:7f:d5:
fd:f9:7e:60:70:ff:94:bc:98:fc:87:40:7e:47:57:ff:8a:a7:
12:fc:0a:4a:d4:b4:2d:9b:6a:87:6e:30:8f:44:5f:5f:42:de:
c6:66:43:b4:df:e5:d8:1c:ce:43:cd:a9:b1:06:61:46:83:a5:
32:11:2b:ed:41:45:23:11:00:d8:85:98:5d:8b:e4:e4:b2:5e:
9e:80:4f:d2:3b:d7:d6:c6:c7:96:fb:c8:3f:22:e6:b2:9c:9d:
78:7d:78:c6:a1:09:db:93:8f:01:6e:de:4c:e8:d7:7d:cc:71:
b3:d9:5f:56:3f:8f:71:65:38:3d:f8:84:6c:65:2d:5b:59:e2:
ba:3c:37:0a:67:a5:1d:ea:8e:52:7f:a0:b5:25:48:50:6a:97:
32:6d:fc:1d:d9:92:0a:2b:55:93:49:04:4b:0f:29:a2:f1:a7:
df:60:18:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYuVZ3zNNMfWBz4b3x+IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDkyODFhYWZlZmM4Mzc1YWQ4YjRiN2U2MDQ4OTk1NTU5
NTIyMzcwHhcNMjUwMTAyMDM0OTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjlhNjg1MWM5YTZlN2M2ZTFmNGI2MDdjMjA5ZDE1Y2Q2MjA5ZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UN7hwJmiUu4ysnmW2TbBPEg7U8+
zYk9vMOu9hKFisOXaVdzjEZ/YPOQNG4ucKV/asl9j6b/w7DpvICwsNYM/G35T3/z
6mL18+BWSiC1MPqwMfx87gFLbu6/UtVk89oSk6a7hm44jyv9yhrj81mVY9gm4Dv8
LqVoixdksgKy3569Jw6rArRkxLisl5e74JJMz9bKGEoqt5l6+wBk2WqcMhMpjkk1
oUesdO1La3uN7sPEKtZmeLSHFHYaEe+2HeAPucSD2jSgJsYiPn82dmUu1T6L0JWB
ESZQt2y9vp7IJHKegAOmC9oxU3N/cAjsnw3JRHRT7cH8mZu4rkSVuWo0IwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEuaaFHJpufG4fS2B8IJ0VzWIJ6AMB8GA1UdIwQY
MBaAFIrZKBqv78g3Wti0t+YEiZVVlSI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQt
OGM3NGY5ZGQ2N2ZjLzEvUzVwb1VjbW01OGJoOUxZSHdnblJYTllnbm9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8wNTg1MDktMmZlNy00ODZiLWI0YWQtOGM3NGY5ZGQ2N2Zj
LzEvaXRrb0dxX3Z5RGRhMkxTMzVnU0psVldWSWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaBbMA0G
CSqGSIb3DQEBCwUAA4IBAQCjPYuXoKy47Yu32LaVxyJqsHRv+Dse2grRAZ5MAvBT
WjIWAZX9hZQO9G6G3RpmpMIUQ7EYdanvILcxBYQ9vhW+JFNRY6eCLswtQjISS144
GULMSA7IlTz1f9X9+X5gcP+UvJj8h0B+R1f/iqcS/ApK1LQtm2qHbjCPRF9fQt7G
ZkO03+XYHM5DzamxBmFGg6UyESvtQUUjEQDYhZhdi+Tksl6egE/SO9fWxseW+8g/
IuaynJ14fXjGoQnbk48Bbt5M6Nd9zHGz2V9WP49xZTg9+IRsZS1bWeK6PDcKZ6Ud
6o5Sf6C1JUhQapcybfwd2ZIKK1WTSQRLDymi8affYBhC
-----END CERTIFICATE-----
Generated at Sun Apr 13 18:32:05 2025 by rpki-client